Simon Brown

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2012-4023 Nov 08, 11:46 MEDIUM This Month

CRLF injection vulnerability in Pebble before 2.6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Code Injection Pebble Simon Brown

NVD

CVSS 2.0

4.3

EPSS

0.3%

CVE-2012-4022 Nov 08, 11:46 MEDIUM This Month

Pebble before 2.6.4 allows remote attackers to trigger loss of blog-entry viewability via a crafted comment. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation Pebble Simon Brown

NVD

CVSS 2.0

6.4

EPSS

0.5%

CVE-2012-5170 Nov 04, 15:55 MEDIUM This Month

Open redirect vulnerability in Pebble before 2.6.4 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Rated medium severity (CVSS 5.8), this vulnerability is remotely exploitable. No vendor patch available.

Open Redirect Pebble Simon Brown

NVD

CVSS 2.0

5.8

EPSS

0.5%

CVE-2012-4023

EPSS 0% CVSS 4.3

MEDIUM This Month

Code Injection Pebble Simon Brown

NVD

CVE-2012-4022

EPSS 1% CVSS 6.4

MEDIUM This Month

Privilege Escalation Pebble Simon Brown

NVD

CVE-2012-5170

EPSS 0% CVSS 5.8

MEDIUM This Month

Open Redirect Pebble Simon Brown

NVD